The answer to this question somewhat depends on how exactly you assigned permissions to the app. If they're hard-coded into Section Access, it'll probably be pretty difficult to achieve something like this. The only way I can think of in that scenario is to read the log file from the app's reload, isolate the list of users in section access, and cross-check that with the list of users who accessed the app. If your section access has groups, you'd need a third step to get the user list for each group (from Active Directory or whatever else controls the groups).
In our case, control of access to apps is primarily through custom properties - a user must belong to an Active Directory group matching the name of the custom property assigned to the app, e.g. "Qlik Sales" or "Qlik Finance". In this case, it is possible to pull the list of apps and custom properties from the QS repository, cross-check it with the list of group members from Active Directory, and then cross-check that with the monitoring app's information.
